zero-to-jupyterhub-k8s icon indicating copy to clipboard operation
zero-to-jupyterhub-k8s copied to clipboard

Vulnerability patch in singleuser-sample

Open jupyterhub-bot opened this issue 1 year ago • 0 comments
trafficstars

A rebuild of quay.io/jupyterhub/k8s-singleuser-sample has been found to influence the detected vulnerabilities! This PR will trigger a rebuild because it has updated a comment in the Dockerfile.

About

This scan for known vulnerabilities has been made by aquasecurity/trivy. Trivy was configured to filter the vulnerabilities with the following settings:

  • ignore-unfixed: true

Before

Before trying to rebuild the image, the following vulnerabilities was detected in quay.io/jupyterhub/k8s-singleuser-sample:4.0.0-0.dev.git.6592.h9cc09f53.

Target Vuln. ID Package Name Installed v. Fixed v.
debian CVE-2024-33599 libc-bin 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33599 libc6 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33600 libc-bin 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33600 libc6 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33601 libc-bin 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33601 libc6 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33602 libc-bin 2.31-13+deb11u9 2.31-13+deb11u10
debian CVE-2024-33602 libc6 2.31-13+deb11u9 2.31-13+deb11u10

After

Target Vuln. ID Package Name Installed v. Fixed v.

jupyterhub-bot avatar Apr 01 '24 05:04 jupyterhub-bot